Building an Infosec Program from Ground Zero - From the Coat Closet to the Data Center
Learn to build a comprehensive InfoSec program from scratch, covering inventory, logging, physical security, monitoring, and essential tools for effective cybersecurity management.
Securing the Secure Shell - The Automated Way
Automated SSH security: Learn key generation, cryptography, configuration, and Ansible integration for robust, efficient secure shell management.
Automating Security in Building Software
Explore automating security in software development, covering DevOps, continuous integration, automated scanning, and organizational change for improved cybersecurity practices.
Challenges and Opportunities in Application Containers and Microservices
Explore challenges and opportunities in application containers and microservices, covering virtualization, orchestration, networking, security, and best practices for modern software delivery.
Current State of Virtualizing Network Monitoring
Explore the current state of virtualizing network monitoring, covering prototypes, hardware architecture, logging, and new technologies like containers and Intel X79 XL7.
Attacking Modern SaaS Companies
Explore techniques for attacking modern SaaS companies, including breaking into Jenkins, exploiting artifact servers, and leveraging AWS vulnerabilities for unauthorized access.
A Better Tool for Hunting Default Creds - Zach Grace
Explore an improved tool for hunting default credentials, featuring demos, explanations, and insights into fingerprinting techniques and Docker integration.
Zero to Owned in 1 Hour - Securing Privilege in Cloud and DevOps Workflow
Discover strategies to secure privileged access in cloud and DevOps environments, focusing on rapid threat mitigation and robust security practices.
Zero to Owned in 1 Hour - Securing Privilege in Cloud and DevOps Workflow
Explore securing privilege in cloud and DevOps workflows, covering accountability, SAML issues, access keys, and best practices for managing secrets and application identity.
Leveraging DevSecOps to Escape the Hamster Wheel of Never Ending Security Failures
Explore DevSecOps strategies to break free from recurring security failures, focusing on integration, collaboration, and proactive measures in software development.
Statistics Lie - Except About Passwords
Explore password patterns, analysis techniques, and security implications in this insightful talk on statistical approaches to understanding user behavior and improving authentication systems.
CTF Tips and Tricks
Explore CTF design strategies to create engaging, accessible challenges. Learn tips for crafting immersive stories, reducing barriers, and fostering lateral thinking in cybersecurity competitions.
Automahack - Automate Going from Zero to Domain Admin with 2 Tools
Automate domain admin access using MITM6 and Responder. Learn NTLM relay, SMB signing, and various attack techniques for efficient network penetration and privilege escalation.
Abuse Case Testing in DevOps
Explore abuse case testing in DevOps, covering threat modeling, test development, and integration. Learn to enhance application security through continuous improvement and monitoring.
Securing without Slowing DevOps
Learn strategies to integrate security into DevOps processes without hindering productivity. Discover best practices for balancing speed and safety in software development pipelines.
The Insecure Software Development Lifecycle - How to Find, Fix, and Manage
Explore strategies for integrating security into software development lifecycles, focusing on stakeholder collaboration, process analysis, and effective implementation of security measures.
The Wrong Kind of DevOps Talk - Now with Extra Badness
Explore DevOps pitfalls and best practices with Bobby Kuzma, uncovering common mistakes and offering insights to improve development and operations processes.
Zero to Owned in 1 Hour - Securing Privilege in Cloud DevOps On Prem Workflows
Explore privilege escalation techniques and security vulnerabilities in cloud, DevOps, and on-premises environments. Learn to identify and mitigate risks in modern workflows.
InSpec Compliance as Code
Explore InSpec for compliance-as-code, learning how to automate security and compliance testing in infrastructure and applications.
Living in a Secure Container Down by the River
Explore container security, isolation models, and best practices for secure containerization. Learn about control groups, namespaces, and implementation strategies to enhance container workload protection.
Red Mirror - Bringing Telemetry to Red Teaming
Explore advanced telemetry techniques for red teaming operations, enhancing situational awareness and improving tactical decision-making during cybersecurity assessments.